Siemens Industrial Edge Management
view advisory published 2025-09-09
Industrial Edge Management is affected by a vulnerability that could allow a remote attacker to cause a denial of service condition. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-48976US | — | Exploit | ||
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.
This issue affects Apache Commons FileUpload: from… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-640476: Denial of Service Vulnerability in Industrial Edge Management - CSAF Versionself
- SSA-640476: Denial of Service Vulnerability in Industrial Edge Management - HTML Versionself
- ICS Advisory ICSA-25-254-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-254-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationIndustrial Edge Management OS (IEM-OS)
Limit access to trusted users and systems only
- No fix plannedIndustrial Edge Management OS (IEM-OS)
Currently no fix is planned
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan